compile-blockchain[.]pages[.]dev
“CODE COMPILER”
Resumo das evidências
This domain, compile-blockchain.pages.dev, is flagged as an active crypto drainer phishing site with a high-risk classification. Analysis indicates it is designed to exfiltrate cryptocurrency wallet credentials and drain funds from unsuspecting victims by mimicking legitimate blockchain services or wallet interfaces. The threat type is highly specific, targeting users involved in cryptocurrency transactions, and is engineered to bypass casual scrutiny through deceptive domain naming and cloned web interfaces. Infrastructure analysis reveals the following technical indicators: the domain resolves to the IP address 172.66.47.117 and is registered through Cloudflare, Inc. VirusTotal detection metrics show that only 1 out of 95 security vendors currently flag this domain as malicious, suggesting either a newly deployed threat or one employing evasion techniques to avoid widespread detection. The domain remains active with no observed presence on major blocklists or threat intelligence feeds beyond the single VirusTotal detection. Trust scores from other reputation services are either neutral or unavailable, further indicating its low visibility in broader threat intelligence circles. Mitigation steps specific to this crypto drainer threat include immediate blocking of the domain and its resolving IP address (172.66.47.117) at the network perimeter. Organizations and individuals should deploy endpoint protection rules to prevent access to compile-blockchain.pages.dev and monitor for any outbound connections to the associated IP. Users should be educated to verify domain authenticity before entering wallet credentials, particularly for domains resembling blockchain services. Cryptocurrency wallet software should be configured to enforce strict origin checks, and multi-factor authentication (MFA) should be enabled where available to mitigate credential theft. Additionally, network traffic logs should be reviewed for any historical connections to this domain or IP to identify potential prior compromises.
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 11/08/2026
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo